Tools

The four built-in tools the agent uses.

Four built-in tools. Zero ceremony. The minimum viable toolbox for an agent that actually ships code.

ToolWhat it does
readRead text files, or render PNG / JPG / GIF / WebP inline on modern terminals.
writeCreate or overwrite files, making parent directories as needed.
editOne or more exact-match replacements in an existing file.
bashRun a shell command in the session cwd with merged stdout/stderr and a timeout.

Jail mode

Type /jail to confine every tool to the current directory. Bash refuses sudo, rm -rf /, and other obvious escape patterns. It is a guardrail against accidents, not a hard security boundary. See Jail mode for the full behavior.